ByteByteGo

Cloud Native Now

CSO Online

Erlang Solutions

Hacker News

InfoQ

<h2>Must know</h2>
<ul>
<li><strong>Linux malware VoidLink targets cloud and containers with Zig</strong>: Check Point Research has identified VoidLink, a new Linux malware framework written in Zig, specifically designed to infiltrate cloud and container environments. This sophisticated threat adapts to major cloud providers like AWS, Azure, and GCP, and uses advanced rootkit techniques for stealth and persistence. It features a modular plugin system for credential harvesting and lateral movement, with communications via multiple channels, as reported by Check Point Research. <a href="https://app.daily.dev/posts/uJaIfhgHH" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Meta pivots from metaverse to AI, cuts Reality Labs staff</strong>: Meta is closing three VR studios—Twisted Pixel Games, Sanzaru Games, and Armature Studio—and laying off approximately 10% of its Reality Labs workforce, about 1,500 employees. This strategic shift comes after Reality Labs lost over $70 billion since 2021, with Meta now redirecting investment towards AI-powered glasses and wearable technology. The move signals a significant deprioritization of the metaverse strategy that once defined the company, as noted across multiple reports. <a href="https://app.daily.dev/posts/7ystcAQPc" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Anthropic restricts Claude Code tokens for third-party tools</strong>: Anthropic has begun strictly enforcing its terms of service, preventing the use of Claude Code subscription tokens with third-party tools like Cursor and Open Code. This policy shift, which requires users to pay significantly higher API prices for external access, has sparked considerable backlash from developers who built workflows around these integrations. The move is seen as an attempt by Anthropic to lock developers into its ecosystem, potentially driven by infrastructure costs and competitive pressures, according to technical reporting. <a href="https://app.daily.dev/feed-by-ids?id=DEqFrm707&amp;id=jcpFkjQkx" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Rust infrastructure team recap and future plans</strong>: The Rust Infrastructure Team successfully migrated to a new CI bot, moved <a href="http://crates.io" target="_blank" rel="noopener nofollow">crates.io</a> index and <a href="http://docs.rs" target="_blank" rel="noopener nofollow">docs.rs</a> to Fastly CDN, and expanded Infrastructure as Code coverage, with Q1 2026 plans including <a href="http://docs.rs" target="_blank" rel="noopener nofollow">docs.rs</a> modernization and external hardware CI policy. <a href="https://app.daily.dev/posts/m2OVQmP6S" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Node.js releases security updates for LTS and current versions</strong>: Node.js 20.20.0 (LTS) and 25.3.0 (Current) were released, addressing multiple CVEs, enhancing permission handling, and updating dependencies like c-ares and undici. <a href="https://app.daily.dev/feed-by-ids?id=DwsoMgMKH&amp;id=Wy4br4Zyw&amp;id=Zr0Dv9dwZ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Bun v1.3.6 introduces tarball handling and performance boosts</strong>: Bun v1.3.6 launched with Bun.Archive for tarball creation/extraction, a JSONC parser, and significant performance improvements across Response.json(), async/await, and Promise.race operations. <a href="https://app.daily.dev/feed-by-ids?id=Wx4br4Zyw&amp;id=Yy5NFIIOM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GCC 16 and JDK 27 bring major compiler and security updates</strong>: GCC 16, expected in March-April 2026, will default to C++20 and support AMD Zen 6 and Armv9.6-A CPUs, while JDK 27 will introduce post-quantum hybrid key exchange for TLS 1.3. <a href="https://app.daily.dev/feed-by-ids?id=MZNI2dhHP&amp;id=fybiaWluM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>WordPress 7.0 to drop PHP 7.2/7.3 support</strong>: The WordPress core team is preparing for version 7.0, which will discontinue support for PHP 7.2 and 7.3, and is seeking volunteers for the release. <a href="https://app.daily.dev/posts/xho5u0zys" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Linux Mint 22.3 enhances accessibility and graphical tools</strong>: Linux Mint 22.3 “Zena” was released with a redesigned Mint Menu, a new on-screen keyboard, improved language input, and new graphical tools for system hardware info and GRUB editing. <a href="https://app.daily.dev/posts/ecK1ViBJk" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Haiku OS updates FreeBSD drivers and expands features</strong>: Haiku OS has updated its FreeBSD compatibility layer to version 15.0, enhancing Ethernet and WiFi driver support, and introducing an EFI loader installation tool. <a href="https://app.daily.dev/posts/xTuptkMAr" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI agents: the new security nightmare, but don’t worry, we’ll just ‘box’ them</strong>: Apparently, agentic AI systems are ‘unreliable and insecure by design,’ with Signal’s Meredith Whittaker warning that user activity stored by tools like Microsoft’s Recall is vulnerable to malware and prompt injection. The solution? Strict controls on ‘Machine Control Protocols’ and ‘real-time detection of unauthorized API key usage.’ Because if we just put the AI in a little box, it can’t possibly exploit semantic vulnerabilities or interpret prompts maliciously, right? It’s not like we’ve seen this movie before with every other ‘secure’ system. <a href="https://app.daily.dev/feed-by-ids?id=TJt6uaOsV&amp;id=XnmeLgefE&amp;id=rjeAcjlYe&amp;id=AqojY4mSV&amp;id=hOkZZEdlQ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI in ecology: less fieldwork, more ‘data-driven’ speculation</strong>: Ecologists are increasingly replacing traditional fieldwork with AI and automated sensors, which sounds great for ‘broader and more frequent data collection.’ But some scientists are ‘concerned over diminishing hands-on ecosystem understanding’ and ‘potential biases in remote data collection methods.’ So, we’re trading actual boots-on-the-ground knowledge for algorithms that might just be making things up, all while venture capitalists throw millions at ‘biodiversity startups.’ What could possibly go wrong? <a href="https://app.daily.dev/feed-by-ids?id=YsLIINgTC&amp;id=dHxdm7wPU" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cloudflare fined for not being Italy’s internet censor</strong>: Italy’s AGCOM has fined Cloudflare €14.2 million for refusing to block pirate sites on its 1.1.1.1 DNS resolver, citing the ‘Piracy Shield’ law. Cloudflare, naturally, claims filtering would ‘increase latency for all users’ and is ‘technically and operationally infeasible.’ CEO Matthew Prince is now running to the U.S. government and the IOC, warning of ‘cybersecurity risks’ for the 2026 Winter Olympics. Because nothing says ‘internet freedom’ like a government demanding a global CDN become its personal content filter, and nothing says ‘principled stand’ like threatening to pull your servers. <a href="https://app.daily.dev/posts/Q0IbcQd4P" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
